DDxordle is a free daily diagnostic-reasoning game at ddxordle.org. Questions about this policy, corrections to it, or a request to delete what we hold: email iviran45@gmail.com.
DDxordle uses a single cookie, called ddx_id, and it is set only after you enable saving, either on the consent bar or with the Enable button on the Leaderboard, Archive or Performance tab. Decline and you get no cookie and the same complete game. Your results just aren't saved anywhere.
If you enabled saving, we keep, under that random ID:
Percentiles and average scores are computed across all players in aggregate. Your IP address is held in memory for a moment to rate-limit abuse, and it may turn up in our hosting provider's routine server logs. It is never stored alongside your game data.
DDxordle has public leaderboards: a daily board of today's scores and an all-time board. A row carries a display name and a score, and on the all-time board it also carries how many days that player has played. Nothing else about you reaches another player. Not your email, not your history day by day, and never a name you did not choose.
You can hide. Your own row on the leaderboard carries a Hide me control. Press it and your name leaves the public boards at once, while your scores go on counting and you go on seeing your own rank. The same control puts you back. Anyone whose account predates these boards starts hidden and sees a Show me control instead. They agreed to have their scores saved, which was never an agreement to have a name published, and we are not going to read it as one.
Your browser's local storage holds your consent choice and your interface preferences, meaning the theme and which intros you have already seen. Once you enable saving it also holds a local copy of your results, your streak and the round you are in the middle of, so that a refresh does not wipe it. The consent choice and the preferences never leave your device. The local copy of your results is only a convenience, since those results are on our servers too once saving is on, as described above. Clearing the site's data in your browser removes everything held locally.
Signing in, either with Google or with an emailed link, exists for one reason: to keep the same record across your devices. Authentication is handled by Supabase, our authentication provider. When you sign in we receive your email address, and from Google your basic profile, which is a name and an email. We use it to connect your devices to one account and for nothing else. We send no marketing email. The only email you will ever get from us is a sign-in link you asked for. Signing out touches that device alone; your account and your scores are untouched.
The site and its database are hosted on Lovable Cloud, which runs on Supabase, and they process data solely to run the service. If you sign in with Google, Google processes that sign-in under its own privacy policy. That is the entire list. No advertising third parties, no analytics third parties, and we never sell or share your data for marketing.
If this policy changes, the new version appears here under a new date. We are not going to quietly weaken anything it promises; if that happens, it will say so on this page.